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JSMART CARD TSIETWORK INTERFACE DEVICE 

FIELD OF THE INVENTION 
The present invention relates to the field of smart cards in general and in particular to a 
stand-alone device for reading smart cards and transmitting information therefi^om. 

BACKGROUND OF THE INVENTION 

Cunenfly available smart card readers are typical^ integrated into computers or 
configured as computer peripheral equipment, connected to die serial port of a personal 
computer, for example. Smart card readers may also be integrated with cellular phone or set- 
top-boxes (TV), or built into other equipment such as bank tenninals, and keyboards, for 
exanqple. Generally, the host appliance, whether a computer, a cellular phone, or a Set-Top- 
Box, is responsible for providing the network mterface. Normally smart card readers rely on the 
host device to provide standard input-output (I/O) interfece for the human-user on top of the 
network connectmty. The necesaty of a host device limits the scope of smart card applications. 
For example, at present each cashier y^th each merchant site requires its own host device, such 
as a PC or a Point of Sale (POS) device;, in order to read a card and if necessary inter&ce with 
the central computer system. 

Cdhilar phones may use the SIM diip of the phone itself as a smart card, but this usage 
is limited to a specific application and does not allow for general-purpose smart card access. 
Alteraativety, a standard-^ze smart card reader may be integrated with the (cellular) phone. In 
the latter case, the reader is dependent on specific properties of the device or on the cellular 
service provider and therefore it is third party dependent. The phone needs to be programmed to 
recognize each specific card in use, or alternatively the approval of cellular telephone operator is 
required 

Set-top-box applications are limited to a communicating via a imique servar, for a 
spedfic card (the cable-operator card, or other pre-set cards), and human-inter&ce is through the 
TV. 

There is thus a need for a stand-alone device T^^dl does not need a separate host device, 
or be integrated in a host devicei, such as a computer, a POS, or a cellular phone, for example. 
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and wbidb. allows any standard card to establi^ a conmomicalion withfhe appropiiate server, to 
implem^ the desired smart card applications. 

SUMMARY OF THE BSrV^NTION 

The present invmtion is directed to a stand-alone device for reading and writing smart 
cards, which incorporates its own processing and network interfece. The device may be 
integrated into a telephone or other network-accessing device, which can capture the network 
connectivity. Furthermore, the general-purpose device allows for access for any card application 
for any smart card. Even when integrated into telephones (cellular or landline), for example, the 
device does not have to rely on spedfic tdephone properti^ nor on the service provider, but 
rather it provides a g^i^ral-purpose network access ov^ telq)hon^ or ai^ other network media. 

The computing power of the card is used for handling the required application layers, 
wMe die computing on the device is used only for n^work inter&dng. The device provides 
communication interfaces allowing the samt card to be exploited in its full potential, utilizing the 
security capabilities of the smart card, and supporting authentication using the (optional) PIN 
(Personal Identification Number). Input and output for the user may be provided through either 
the telephony or optionally, an on-device display and keyboard. 

In an ^bodiment of the present invention, th^e is provided a device, which includes a 
smart card read^ and a communications intea&jOGy and a controller that transfers data between 
these two inter&c». The commumcations inter&ce may be at least one inter&ce including 
MODEM, infia-red (IR), Ethernet, radk> fiequency (RF), audio tones or any other 
commumcation mecfia, coupled to the smart card reader. 

In a further embodiment of the preset invention, thore is provided a system for remotely 
veriJ^mg the identification (authentication) of the user of a smart card. The system includes the 
smart card device of tiie invention and a remotely located server in communication with the 
commumcations interface, the server having means for verifying the validity of the smart card 
being read by the smart card device, and other data keyed into the device. The remotdy located 
server may fiuther comprise means for validating a certificate or means for gen^:ating a 
cha&ei^e that is tiim authenticated by the appropriate response from the device. The remotely 
located server may finiher comprise means for transferring e-goods or e-money. 
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Furthermore, the smart card device may be configured to be connectable between a 
telephone and the wall socket of a telephone line or to a cellular tel^hone. 

Furthermore, the conmmmcations inter&ce may include at least one of a group including 
aMODBVI, Ethernet, infra-red (BSC), RF and audio tones. 
5 Furthermore, the smart card device may include a display screen and a nummc and/or 

functions keypad. The device may also include encryption means and a connector for external 
devices. The external devices m^ include a printer, a keypad and a biometric data reader. 

Furthermore, the power source may include at least one energy source from a group 
including an internal batteiy, an ^eternal power inlet, the commumcation media to wUch the 
1 0 device is coupled and a rechargeable batl^. 

Furthermore, the smart card device may indude at least one of a group including a 
printer, a keypad and a biometdc data reader integrated ^tlun the device. The smart card 
device may fiirther include at least one of a group of proces^g components including a 
additional computation capalnlities, adcfitional communication inter&ces and additional 
1 5 encryption capabilities. 

Furthermore, the smart card reader may include at least one memory component 
including Read Only Memory (ROM), Non-Volatile Memory (NVM) and Random Access 
Mraiory (RAM). 

In another embodimeat of the present invention, there is provided a method for verifying 
20 the identificadon of the remote us^ of a smart car^ the method indu^g the steps of inserting a 
smart card into a smart card device of the invention, transmitting data to and from the smart 
card, via the communicadons inter&ce, to a remoteiy located server, the remotdy located serv^ 
transferring transaction information to the smart card device for approval, inputting privately 
known information into the smart card device and transmitting the proof of signature (certificate) 
25 to the remotely located server, and the remotety^ located servo" verifying that the privately known 
information is the valid one for the card. 

In another embodiment of the present invention, there is provided a method for remotely 
purchasing goods or services, the method induding the steps of inserting a smart card into a 
smart card device of the invention, sdecting an item to be purchased from a supplier, 
30 transmitting data read from the smart card, via the communications tnter&ce, to a remotely 
located server in commuoication vn&L the supplier, the r^otely located server transferring 
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transaction infi>imation associated wfh the purchase to the smart card device for approval, and 
storing the transaction information in the smart card. 

Furthermore^ the method may include the step of authenticating the identity of the smart 
card user. The step of authenticating may indude Ihe steps of inputting privately known 
5 information, the smart card verifying that the privately knoivn information matches the smart 
card data, and generating a certificate validating the transaction. 

Furthermore, the step of authenticating may be performed by the remotely located 

server. 

Furthamore, the transaction m^ involve e-goods, which can then be stored on the card 
10 itself for a later use. 



BRIEF DESCRIPTrON OF THE DRAWINGS 
The above and other characteristics and advantages of the invention will be better 
imderstood through the following iHustrative and non-4imitative detailed description of preferred 
1 5 embodiments th^eo^ with reference to the appended drawings, wherein: 

Fig. 1 is a schanatic illustration of a prior art example of an operational environment for 
use with smart cards; 

Fig. 2 is a schematic illustration of a smart card device constructed and operative 
according to an embodiment of the invention; 
20 Fig. 2a is a schematic illustration of the smart card de\dce of Fig. 2 hooked on to a 

standard telephony 

Fig. 3 is a schematic illustration of a smart card device, of Fig. 2 hooked on to a cellular 
telephone; 

Fig. 4 is a flow chart illustration of the use of the smart card device of Fig. 2; 
25 Fig. 5 is a schematic illustration of a smart card device, according to another embodiment 

of the invention; and 

Fig. 6 is a flow chart illustration of a forther use of the smart card device of Fig. 2. 



30 



DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
Reference is now made to Fig. 1, which is a schematic illustration of a prior art e?rample 
of an operational environment for use with smart cards. 
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In the configuration of Fig. 1, a smart card 12, ^ch may be inserted in a smart card 
reader 14 is in communication with a host device such as personal computer (PC) 16. 
Communication between the card reader 14 and the host device 16 may be via any peripheral- 
device to PC communication inter&ce, for example an RS-232 communication inteifece 18. A 
MODEM 20 is connected to host device 16. 

Data is read from the smart card 12 by smart card reader 14 and transferred via the 
peripheral-device to communication interface 18. The Host device 16 manages the interactions 
with the card, and when deared it transfets information from and to host device 16 to and from 
thecardl2. To ti^ansfer data onwards, Ae modsn 20 may communicate witii a remote server 
22 via the Internet 24, using any lotemet protocol, such as HTTP, for example; or secured 
protocols if desired, lii a amikr prior-art configuration, tiie reader may be hooked to the cdlular 
phone, vMch serves as a hosi; and carries mudi of the ^plication's lo^c. 

RefeTHice is now made to Kg. 2, which is a sdiematic illusfaation of a smart card device, 
generally designated 50, according to an embodiment of tiie invention. 

Smart card device 50 conqmses a device conti^oller 52 connected to a smart card reader 
64 and a MODEM 54. It will be appreciated by persons knovdedgeable in tiie art tiiat tiie 
MODEM may be replaced by any other network interfece component, sudi as Bluetooth, I-R, 
or Etiiemet as examples. The contrDfler 52 may comprise minimal processing capabilities, such 
as tiansferring and correctly packaging one communications protocol to another in order to 
control ai^r of the embodied devices. The memory may include Read Only Memory (ROM), 
Non^Volatile Memory (NVM) and Random Access Memory (RAM), for example. A smart 
card reader 64 is coimected to controller 52. 

In a fiiriher embodiment of the invention, smart card device 50 may further comprise a 
display 56 and minimal keypad having at least one key 58, or ports for attaching external 
equipment, such as an external keypad (not shown), or a printer. 

hi yet additional embodiments of the inventiori, the device contain an enayption 
device sudi as a SIM 

In yet additional embodiments of die invention, the device may contain a battery or an 
ertemal power source. Ahanatively, tiie spedfic communication media, to which tiie device is 
attached, may provide tiie power supply for the device, or power may be suppfied from a 
combination of the above sources. 
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The smart card device 50 is configured to dial or hook into any network 66, such as a 
telephone network, for example and complete a two-way protocol, with the server 62. The 
server 62 may be any suitable network server, sudi as an Internet server, or an Interactive Voice 
Response server (IVRX dq)ending on the desired network in use. In this embodiment, data is 
read fix)m the smart card 60 by smart card reader 64 and transferred via MODEM 54 using 
voice-MODEM protocol, for example, to IVR Server 62. 

In an exemplary embodiment, illustrated in Fig. 2a, the smart card device 50 may be 
coupled between a telephone instiumait 67 and tiie wall-socfcet of the telephone line 68. 

Similarly, in an exemplary embodiment, iUustiated in Eg. 3, a smart card device^ 
generally designated 100 m^ be connected to a transceiver, such as a cellular telephone 104, via 
any of the ceMular tdqahone interfeces (sudi as, IR, ear-phone-q)eaker, or Bluetooth), and 
provide aO the required access fimctions to a remote server 106. The remote server 106 may be 
an rVR or human savice provider, or an SMS server. 

Smart card device 100 comprises a controUer 52 connected to a smart card reader 64 
(similar to the reader of fig. 2) and coupled to an infi-a-red QK) transceiver 102, or any other 
inter&ce capable of bdng supported by cellular phones. 

In the embodiment of Fig. 3, the device 100 transmits and recwves the data read by 
smart card reader 64 via the IR transceiver 102 to an IR transceiver located within the cdlular 
device 104, which may then act as a device controller for a sped&c application. For example, IR 
receiver 104 m^ cause the cdlubr phone to transmit authentication data read fi^om the smart 
card 60 to remote saver 106, usirig ary of the cellular phone channds. After secure 
identification of the user and verification that ID matdies the data fi^om the smart card, the server 
106 may authorize the cdlular phone 104 to interact with another external device and perform a 
requested/authorized action, or altemativefy, the server may directly instruct the device to 
provide the requested access. TMs example is illustrative of the use of a smart card device of the 
present invention for buflding low-cost "gate-keepers" based on cdlular connectivity and smart 
card authentication c^abilities. 

In an alternative embodimenl; tiie IRtranscdver wifliin the ceUular phone 104 may allow 
tite tdephone's display and keyboard to be used. The cdhilar phone taay be used for fijll human 
dialogue witii the server 106. 
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The operation of fhe smart card de\dce may be described with reference to the flow chart 
of Fig, 4, to whidi reference is now made. The user establishes communication with the server 
of the service supplier (stq) 200). Communication may be established by dialing from a phone, 
as shown in the embodiment of Fig. 2, or by hooking to the LAN, or by any other mean of 
5 joining the requested network. A transaction (deal) is negotiated (step 201) or a service 
purchased or requested. 

The smart card may be reqcdred either in order to complete the acceptance of the device 
into the network, in which case a handshake may be required, or alternatively, the smart card 
may be required just for pa:fonning the desired transaction. The smart card 60 is inserted into 

10 the smart card device 50 (step 202), which reads the ioformation on the smart card (step 204). 
Altemativebj^, some networks may require that the card be inserted before goods or a service is 
purchased. After the smart card is insoted, the MODEM changes fi-om voice mode to data 
mode, as is known in the art, so as to allow data to be transferred. Altematively, the network 
interfece may select the appropriate transactional state. 

15 In the prior art, user identity is generally authenticated in the following manner: First, the 

user "identifies" himsdi^ for example by stating his name (or by reading the open information on 
the card). Secondly, the usa- may be requested to show the card: ownershq) of the card is 
perceived as a proof of identity. Since cards m^be lost; stolen^ or copied - an additional proof 
is often required. This proof nmy conast of a PIN or secret information (such as the maiden 

20 name of the card holder^s motherX or by biometric information, wMch typically cannot be given 
to others, or a combination thereof 

In an embodiment of the invention, the user^s ownership of the card is proven by the 
insertion of the card into the device; the identity may be fiirther authenticated by transferring the 
smart card information to the service provider, and / or by u^g additional mean like PIN and / 

25 or biometric identification. 

The PIN may be keyed on a keyboard that forms an int^;ral part of the device, an 
external keyboard or the tdq)hone keyboard. Biometric data (such as fingerprint, voice 
signature, iris pattern, hand palm, etc.) may be obtained using a tnometric reader, integmted in 
the device, orby^^nal means, as is known in the art. 

30 The PIN and / or biometric data may be sent to the service provider (or to mediator card 

manager) as is, encrypted, or authenticated in the smart card itself In the latter case the 
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authentication certificate is sent to the sendee provider, whidi may vafidate the certificate, as is 
known in the art. When emciypted for sending, &e device may use the integrated SIM fi^r 
CTcryption, or use the encryption en^e of the smart card itself \;^en possible. 

Typicafly, beddes the need to identify the user/customer, the merchant or service 
provider needs to obtain proof of the existence of the transaction, and its details. At present, this 
confirmation is obtained either by having the customer siga a piece of paper where the 
transaction data is recorded, or by generating a digital signature. In an embodiment of the 
invention, confirmation may be obtained as fi3]lov^: 

The transaction infi>nnation may be trans^ed to the device SO for tiie user's to 
review and / or to confirm and possibly also to store on the card. 

Ck)i]finnation may be obtained by keying a confirnaationk^ (of die devic^^ external, 
or tiie telephone keyboard), keying the PIN, or a biometric reader. 

This information may be sent to the service provider in a w^ similar to sending the 
identification. 

In an embodiment of the invention,_confirmation may be obtained by generating an 
encrypted foma, which ^combines' the transaction data and the authenticated identity. The 
'combined form' is sometimes referred to as a digital signature. This entire sequence is also 
known as a "'challenge-response^ medianism. 

All of these identification and certification medianisms may be carried out according to 
the flow chart of Fig. 4, to wMch r^rmce is now made. The transaction information is 
transferred to the device 50 and displayed for approval (step 206). (The transaction information 
may also be stored in the card.) When the user types in Ms PIN (step 208), the card uses the 
transaction information and the PIN code in order to generate a digital proo:^ or a certificate, or 
alternatively, the PIN may be sent to the server to be used for certification and authentication. 

The service provider (bank, for example) checks the authentication of the user/caller 
(qu^ box 210), either by validating the certificate^, or by vending the provided PBST. If the 
signature is valid (step 212), the s^vice provider can then allow the us^/caller to proceed to 
order a service (step 214), such as loading e-money into the smart card, or just proceeding with 
the conversation with the same person in the service provider, the certification or 
authentication processes fails, tiie service provide: may perform one of several steps, such as 
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requesting a retry to overcome enrors^ dedine the transaction, abort the comnmmcation, or even, 
if authorized, disable tiie card (step 21 1). 

In a further example, flie smart card device may be utilized as a cash-loading banking 
terminal, that is, as a remote service point for loading e-money into the smart card from a bank, 
5 for example. Other applications will be described h^einbelow. 

Reference is now made to Fig. 5, which is a schematic illustration of smart card device, 
according to another embodiment of the invention. Elements having similar functions have been 
designated with similar numerals and will not be desaibed further. 

Fig. 5 is a schematic illustration of a smart card device, g&i&raXfy designated 70, 
1 0 according to an embodiment of the inventioa Smart card device 70 comprises a controller 52, 
which manages a smart card reader 60 (dmilar to the reader of fig. 2), and an Ethernet interface 
72 for a LAN (Local Area Network) 74. In this embodiment, the smart card device 70 is 
configured to utilize the Ethernet interfece 72 and hook into a LAN 74, to access the Intemet 
Server 62 directly from the device 70. The smart card 64 and the Intemet server 62 can complete 
15 a client-server application over the Intemet and LAN without any additional computer for 
mediatioa The controller of the smart card device 70 simply acts as a communication enabler, 
establishirg the link fi^r a complete di^t-s^^ configuration. 

In a fiuther embodimait of the invention, smart card device 70 may fiirther comprise a 
display 56 and keyboard 58 (similar to Fig. 2). It may also contain an «ictyption module, such as 
20 a SIM. 

The smart card device illustrated in the aforementioned ^nbodiments may be used in 
many different applications, as will now be d^cribed by reference to the non-limiting exemplary 
applications hereinbelow. 

The smart card may be used for a remote credit/debit or pre-paid transaction. This allows 

25 for carrying out secure transactions from home. In this case, the customer calls the merchant 
inserts the card and the device at home and interacts directiy with the POS at the mediant's 
shop. The merchant's POS may commuiucate with the credit card company to recdve 
authorization to charge the sale. This allows for eliminating one of the common fraud means^ 
namely Card Not Present (CNP), vMch mainly exists in the MOTO (mail order tdephone 

JO order). By effectively presentir^ the card (by inserting it into the device), the merchant is 
assured that the customer cannot dispute the transactioa Entering the PIN in addition to the 
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Standard aredit card details adds a fijrther levd of authentication^ and provides a "agnature" on 
the transaction - this "agnature" may be considered to be equivalent to a hand-writtm signature. 
This turns the "card not present" transactions into a fiilly approved transaction, thereby 
preventing and redudng the level of fraud. 

In an exemplary application, the smart card device 50 may be used for buying 
merchandise from a supplier over the telephone when the card is not present, that is, the card is 
not viewable by the supplier. The use of the smart card device allows the purchaser to 
eflfectivety preset and have his card verified from a remote location, as will be described with 
reference to the flow diart illustration of Fig. 6. 

The smart card device (of Fig. 2) is hooked on a phone-cord (stq> 302X connecting 
between the phone and the wall-socket (Fig. 2a), Hie user selects which service to dial into 
(step 304), sudi as shopping from a call center, or food deliveiy (pizza etc), or call-charge. The 
user inserts a smart card into the smart card device (step 306) allowing the merchant to receive 
data relating to the user's smart card. The merchant verifies the authenticity of the smart card 
(step 308). 

The user may activate a sdected combination of keys using the numeric keyboard of the 
telephone or smart card device to identify a particular transaction offered by the merchant (step 
310), The transaction information is transfenred to the smart card device and displayed for 
approval (step 3 12). The transaction information may also be stored in the card. 

The user optionally CTters a personal ID (PIN) number (step 314), using device's 
keypad. The personal m number (PIN) may be a merchant specific PIN numbCTaHora^ 
user by the merchant, or typically, it may be the card's PIN code. The use of the PIN is optional, 
depending on the merchant or card-issuer's policy. There is no need to transmit PIN mformation 
over the phone, as the card performs the authenticatioa 

The use of the PBST provides an additional verification for the m^chant (step 314) and 
may be required, before the transaction is approved (st^ 310), for example if the cost of the 
transaction is over some threshold. 

The merchant diecks authentidty of tiie signature, uaiig standard certificate procedures 
(digital signatures) of the user (query box 316) aiui if tiie signature is approved (authentication 
completed) (step 318), completes the sale (step 320), Otherwise, that is, if the digital signature is 
rqected (step 3 17), or if the card issuer or the "acquirer^' disqualifies the card - the service may 
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be deeded (that is, the transaction is rgected), or fiirtibier, the issuer may de-activate the card, 
using the issuer authority. This scenario may be carried out remotely from any telephone. 

In an alternative application, the smart card device of the embodiment of Fig. 3 may be 
utilized with a cellular phone to make transactions. 
5 In a further exemplary application, the smart card device 50 may be used for buying 

merchandise, using the e-money or coupons previously loaded and stored in the smart card. In 
this case, the card may be used &ir an e-cash operation instead of as a credit/debit card) and 
communication is direct^ to the on-line server of a mCTchant supplying goods or services. 

In a fiirther exenq)Iaiy q>pfication, the user may utilize the e-money stored on the card 
10 for ordering telephone calls that avoid the neces^ of purdia^iig prepaid card^ for ecample. 

In a forther exemplary application, the smart card device may be used for general 
authentication purposes, such as authentication of the ID of a telephone caller. For example, a 
caller who wishes to verify his bank balance may be requested to enter his smart card and PDSf 
number (as described hereiiaabove) before information is released over the telephone. The use of 
15 the smart card de\dce thus adds a further level of user authentication. The need to enter a PDST 
number into the device is optional, but gives an improved levd of security over easting methods, 
such as requesting personal information sudi as a passport number or mother's maiden name, 
information which also be known to other people. It will be appredated by persons 
knowledgeable in the art that the PIN needs not be transmitted but rather may be tested by the 
20 card locally, and forthermore, all the communicated data may be encrypted as described 
hereinabove. 

In a forther ^plication of the present invention, the smart card device may be installed 
at a merchant's point of sale (POS) such as a low-volume or mobile merchant's shop. In this 
case, the smart card device could be used as a regular credit/debit card or alternatively for e- 

25 money transactions. In this scenario, the smart card device may be in communication with the 
clearing-house server. This allows for removing tlie need for an e7q)en^e POS, as the device 
itself is capable of complying with paymmt regulations. 

In a further application of the present invention, the smart card device of the present 
mvention may be used in public transport such as rail, bus or flights. For ^cample, the smart 

30 card device may be used from home to order flight, rail or bus tickets and/or reserving seats. In 
this scenario, the user would call the transport company and purchase his tickets and/or reserve 
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seats uang his smart caid inserted in the device, amilar to the method described above with 
reference to the flow charts of Figs 3 and 6. The purchase may be by credit or with e-money and 
the purchase/reservation information would be stored in the card (e-licket). In this case, the 
merchandize itself is also an dectronic one, and therefore the transaction completion includes the 
delivery of the goods. 

The transport company (bus or rail) would then verify the purchase/reservation 
information by reading the traveler's smart card via contact reader or RF transceiver installed on 
buses or at the railwajr station. In a similar manner, the smart card may be used in the device to 
obtain e-coupons fix>m suppliers, lhat is, coiq)ons having monetary vahie for purchase of goods. 

The card authentication can be performed in several ways as described hereinabove with 
reference to Figs. 4 and 6. The device is transparent to the authentication requirements, as this is 
carried out either by the card, or by the remote server 

The above examples and description have of course been provided onfy for the purpose 
of illustration, and are not intended to limit the invention in aisy way. It will be appreciated that 
numerous modifications, all of which fall within the scope of the present invention, exist. Rather 
the scope of the invention is defined by the claims that follow: 



